configure-notifications

Warn

Audited by Socket on Jun 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the native Telegram/Discord/Slack portions are coherent and mostly benign, but the same skill also enables arbitrary third-party webhook delivery and local CLI execution, making its actual capability broader than its stated notification-configuration purpose. No malware or supply-chain installer behavior is evident, but the expanded custom integration surface and plaintext secret storage create medium security risk.

Confidence: 87%Severity: 64%
Audit Metadata
Analyzed At
Jun 24, 2026, 12:01 AM
Package URL
pkg:socket/skills-sh/Rheinmir%2Fskills-kit%2Fconfigure-notifications%2F@59e11fc0d22bef4f0c81b4a3630e8dc365a37bc741c4bcb0f2eb764a4743110b
Security Audit — socket — configure-notifications